ZipRecruiter

Log In

1

Nist Rmf Jobs in Maryland (NOW HIRING)

ATTAINX INC

Cyber & A&A Security Lead - Level IV

Silver Spring, MD · On-site

$135K - $158K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Conduct security control assessments in accordance with NIST RMF and NIST SP 800-53. * Review SAPs, SARs, VARs, POA&M recommendations, and ATO briefing materials. * Conduct risk analyses and evaluate ...

ATTAINX INC

Cyber & A&A Security Lead - Level IV

Silver Spring, MD · On-site

$135K - $158K/yr

  • Medical

  • Dental

  • Vision

  • Retirement

  • PTO

Conduct security control assessments in accordance with NIST RMF and NIST SP 800-53. * Review SAPs, SARs, VARs, POA&M recommendations, and ATO briefing materials. * Conduct risk analyses and evaluate ...

previous page

Showing results 41-60

All JobsNist Rmf JobsNist Rmf Jobs in Maryland

Nist Rmf information

What is NIST RMF?

NIST RMF stands for the National Institute of Standards and Technology Risk Management Framework. It is a structured process used by federal agencies and organizations to identify, assess, and manage cybersecurity risks to information systems. The RMF provides a set of steps that guide organizations through the selection, implementation, assessment, and monitoring of security controls to ensure systems meet required security standards. This framework is essential for achieving compliance with federal cybersecurity requirements and improving overall information security.

What is the difference between Nist Rmf vs Cybersecurity Analyst?

AspectNist RmfCybersecurity Analyst
CertificationsRisk Management Framework (RMF) certifications, NIST guidelinesCompTIA Security+, CISSP, CEH
Work EnvironmentGovernment agencies, federal projects, compliance-focusedPrivate sector, IT departments, security teams
Industry UsagePrimarily in federal and defense sectorsAcross various industries including finance, healthcare, tech
Primary FocusImplementing and managing risk management frameworksMonitoring, analyzing, and responding to security threats

While Nist Rmf specialists focus on establishing and maintaining risk management processes based on NIST standards, Cybersecurity Analysts are more involved in threat detection and incident response. Both roles require security knowledge but serve different functions within cybersecurity frameworks.

What are some typical challenges faced by professionals implementing the NIST RMF in an organization?

Professionals working with the NIST Risk Management Framework (RMF) often encounter challenges such as aligning organizational processes with RMF requirements, ensuring stakeholder buy-in, and maintaining comprehensive documentation. Adapting legacy systems to meet modern security controls can be complex, and coordinating efforts across multiple teams—such as IT, compliance, and management—requires strong communication skills. Staying current with evolving NIST guidelines and integrating continuous monitoring into daily operations are also important aspects to manage for success in this role.

What are the key skills and qualifications needed to thrive as a NIST RMF specialist?

To thrive as a NIST RMF specialist, you need a solid understanding of information security principles, risk assessment, compliance standards, and often a background in cybersecurity or IT, supported by certifications like CISSP, CAP, or Security+. Familiarity with NIST SP 800-37, eMASS, and other GRC (Governance, Risk, and Compliance) tools is typically required. Attention to detail, analytical thinking, and strong communication skills help professionals navigate complex regulatory requirements and effectively collaborate with stakeholders. These skills are essential for ensuring organizational compliance, safeguarding sensitive data, and managing security risks efficiently.

What are popular job titles related to Nist Rmf jobs in Maryland?

For Nist Rmf jobs in Maryland, the most frequently searched job titles are:

What job categories do people searching Nist Rmf jobs in Maryland look for?

The top searched job categories for Nist Rmf jobs in Maryland are:

Nist Rmf jobs near you
Infographic showing various Nist Rmf job openings in Maryland as of August 2026, with employment types broken down into 96% Full Time, and 4% Contract. Highlights an 92% In-person, and 8% Remote job distribution.

Cybersecurity Analyst - Intermediate

VG Systems

Fort George G Meade, MD • Hybrid

Full-time

Re-posted 7 days ago

Job description

VG Systems, LLC, a HUBZone small business based in Quantico, VA, is seeking aCybersecurity Analyst (Intermediate) to support our federal IT and cybersecurity operations at Fort Meade, MD. This full-time role is ideal for a motivated professional with hands-on experience in monitoring, threat detection, vulnerability management, and cybersecurity compliance.


Key Responsibilities

  • Monitor and analyze security events using SIEM platforms such as Splunk, ELK, and Microsoft Sentinel to detect intrusions, anomalies, and malware activity.
  • Conduct forensic investigations on suspicious network activity and support incident triage and resolution.
  • Conduct vulnerability scanning, analyze results, validate patches, and coordinate remediation with system owners.
  • Develop, update, and maintain cybersecurity baseline documentation (e.g., CONOPS, Incident Response Plans, SOPs, PPPs).
  • Assess applicability of IAVMs, STIGs, and SRGs; track remediation efforts and document compliance.
  • Support development and maintenance of RMF accreditation packages, including evidence collection, compliance validation, and POA&M development.
  • Apply RMF controls and assist with Authority to Operate (ATO) documentation.
  • Provide inputs for monthly/quarterly security status reports and IA briefings.
  • Document incident response actions and create after-action reports for leadership review.
  • Assist senior engineers and analysts with risk assessments and corrective action planning.
  • Participate in cybersecurity inspections (CCRI, SAV) by preparing documentation and supporting on-site assessments.
  • Support red/blue team exercises and improve SOC playbooks for faster containment and recovery.
  • Ensure cybersecurity requirements are fully integrated into system lifecycle processes.
  • Assist with configuration reviews, log management, and system baseline checks across hybrid cloud environments.
  • Enforce Zero Trust-aligned data governance and access models.
  • Integrate AI-enabled analytics into SOC workflows for faster detection and automated threat forecasting.
  • Develop Python and PowerShell scripts to automate security log parsing, vulnerability reporting, and alert notifications.
  • Maintain all position-based Standard Operating Procedures (SOPs) and update them as needed or requested.

Qualifications


Required:

  • Active Secret clearance.
  • 3-5 years of relevant IA/cybersecurity experience.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or four additional years of relevant experience in lieu of degree).
  • DoD 8570 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or equivalent).
  • Experience with DISA IA processes, eMASS, ACAS, and STIG/SRG compliance.
  • Strong knowledge of DoD RMF, NIST 800-53, DISA STIGs, and Zero Trust architectures.


Desired:

  • Familiarity with FISMA reporting and NIST RMF processes.
  • Experience supporting DISA CCRI/SAV inspections.
  • Strong written and oral communication skills for Government reporting.
  • Hands-on experience with security tools including Splunk, ArcSight, ELK, Microsoft Sentinel, Wireshark, Snort, and Nessus.
  • Proficiency in automation and scripting using Python, PowerShell, or Microsoft Power Automate.
  • Experience with cloud platforms such as Microsoft Azure Government, Microsoft 365, and AWS GovCloud.
  • Detail-oriented, dependable, and able to work independently.


Equal Opportunity Employer/Veterans/Disabled

Apply